Warning: Permanently added '[localhost]:40680' (ECDSA) to the list of known hosts. 2022/10/02 07:33:43 fuzzer started 2022/10/02 07:33:44 dialing manager at localhost:35095 syzkaller login: [ 43.931020] cgroup: Unknown subsys name 'net' [ 44.031334] cgroup: Unknown subsys name 'rlimit' 2022/10/02 07:33:58 syscalls: 2215 2022/10/02 07:33:58 code coverage: enabled 2022/10/02 07:33:58 comparison tracing: enabled 2022/10/02 07:33:58 extra coverage: enabled 2022/10/02 07:33:58 setuid sandbox: enabled 2022/10/02 07:33:58 namespace sandbox: enabled 2022/10/02 07:33:58 Android sandbox: enabled 2022/10/02 07:33:58 fault injection: enabled 2022/10/02 07:33:58 leak checking: enabled 2022/10/02 07:33:58 net packet injection: enabled 2022/10/02 07:33:58 net device setup: enabled 2022/10/02 07:33:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 07:33:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 07:33:58 USB emulation: enabled 2022/10/02 07:33:58 hci packet injection: enabled 2022/10/02 07:33:58 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 07:33:58 802.15.4 emulation: enabled 2022/10/02 07:33:58 fetching corpus: 50, signal 32393/34169 (executing program) 2022/10/02 07:33:59 fetching corpus: 100, signal 38606/42057 (executing program) 2022/10/02 07:33:59 fetching corpus: 150, signal 49629/54529 (executing program) 2022/10/02 07:33:59 fetching corpus: 200, signal 56727/63054 (executing program) 2022/10/02 07:33:59 fetching corpus: 250, signal 61501/69241 (executing program) 2022/10/02 07:33:59 fetching corpus: 300, signal 67102/76146 (executing program) 2022/10/02 07:33:59 fetching corpus: 350, signal 73453/83640 (executing program) 2022/10/02 07:33:59 fetching corpus: 400, signal 75710/87238 (executing program) 2022/10/02 07:33:59 fetching corpus: 450, signal 79810/92503 (executing program) 2022/10/02 07:34:00 fetching corpus: 500, signal 81565/95531 (executing program) 2022/10/02 07:34:00 fetching corpus: 550, signal 84560/99681 (executing program) 2022/10/02 07:34:00 fetching corpus: 600, signal 88002/104178 (executing program) 2022/10/02 07:34:00 fetching corpus: 650, signal 90843/108111 (executing program) 2022/10/02 07:34:00 fetching corpus: 700, signal 93743/112044 (executing program) 2022/10/02 07:34:00 fetching corpus: 750, signal 95885/115247 (executing program) 2022/10/02 07:34:00 fetching corpus: 800, signal 101756/121735 (executing program) 2022/10/02 07:34:00 fetching corpus: 850, signal 105777/126497 (executing program) 2022/10/02 07:34:01 fetching corpus: 900, signal 108397/130000 (executing program) 2022/10/02 07:34:01 fetching corpus: 950, signal 110248/132786 (executing program) 2022/10/02 07:34:01 fetching corpus: 1000, signal 112144/135520 (executing program) 2022/10/02 07:34:01 fetching corpus: 1050, signal 114104/138341 (executing program) 2022/10/02 07:34:01 fetching corpus: 1100, signal 115925/141008 (executing program) 2022/10/02 07:34:01 fetching corpus: 1150, signal 117254/143223 (executing program) 2022/10/02 07:34:01 fetching corpus: 1200, signal 120011/146637 (executing program) 2022/10/02 07:34:01 fetching corpus: 1250, signal 122746/149956 (executing program) 2022/10/02 07:34:02 fetching corpus: 1300, signal 123571/151663 (executing program) 2022/10/02 07:34:02 fetching corpus: 1350, signal 124600/153576 (executing program) 2022/10/02 07:34:02 fetching corpus: 1400, signal 125676/155471 (executing program) 2022/10/02 07:34:02 fetching corpus: 1450, signal 127602/158049 (executing program) 2022/10/02 07:34:02 fetching corpus: 1500, signal 129613/160714 (executing program) 2022/10/02 07:34:02 fetching corpus: 1550, signal 130989/162772 (executing program) 2022/10/02 07:34:02 fetching corpus: 1600, signal 131900/164514 (executing program) 2022/10/02 07:34:02 fetching corpus: 1650, signal 134039/167185 (executing program) 2022/10/02 07:34:02 fetching corpus: 1700, signal 135308/169112 (executing program) 2022/10/02 07:34:02 fetching corpus: 1750, signal 136630/171168 (executing program) 2022/10/02 07:34:03 fetching corpus: 1800, signal 137582/172859 (executing program) 2022/10/02 07:34:03 fetching corpus: 1850, signal 139050/174879 (executing program) 2022/10/02 07:34:03 fetching corpus: 1900, signal 140287/176744 (executing program) 2022/10/02 07:34:03 fetching corpus: 1950, signal 141082/178235 (executing program) 2022/10/02 07:34:03 fetching corpus: 2000, signal 141805/179684 (executing program) 2022/10/02 07:34:03 fetching corpus: 2050, signal 143315/181701 (executing program) 2022/10/02 07:34:03 fetching corpus: 2100, signal 144201/183226 (executing program) 2022/10/02 07:34:03 fetching corpus: 2150, signal 145041/184758 (executing program) 2022/10/02 07:34:03 fetching corpus: 2200, signal 146494/186726 (executing program) 2022/10/02 07:34:04 fetching corpus: 2250, signal 148705/189084 (executing program) 2022/10/02 07:34:04 fetching corpus: 2300, signal 149781/190697 (executing program) 2022/10/02 07:34:04 fetching corpus: 2350, signal 152105/193103 (executing program) 2022/10/02 07:34:04 fetching corpus: 2400, signal 153940/195167 (executing program) 2022/10/02 07:34:04 fetching corpus: 2450, signal 154477/196384 (executing program) 2022/10/02 07:34:04 fetching corpus: 2500, signal 155178/197699 (executing program) 2022/10/02 07:34:04 fetching corpus: 2550, signal 155918/198963 (executing program) 2022/10/02 07:34:04 fetching corpus: 2600, signal 157415/200711 (executing program) 2022/10/02 07:34:05 fetching corpus: 2650, signal 158328/202107 (executing program) 2022/10/02 07:34:05 fetching corpus: 2700, signal 158763/203178 (executing program) 2022/10/02 07:34:05 fetching corpus: 2750, signal 159623/204486 (executing program) 2022/10/02 07:34:05 fetching corpus: 2800, signal 160937/206052 (executing program) 2022/10/02 07:34:05 fetching corpus: 2850, signal 161608/207235 (executing program) 2022/10/02 07:34:05 fetching corpus: 2900, signal 162301/208396 (executing program) 2022/10/02 07:34:05 fetching corpus: 2950, signal 163078/209654 (executing program) 2022/10/02 07:34:05 fetching corpus: 3000, signal 164951/211486 (executing program) 2022/10/02 07:34:05 fetching corpus: 3050, signal 165580/212567 (executing program) 2022/10/02 07:34:06 fetching corpus: 3100, signal 167075/214174 (executing program) 2022/10/02 07:34:06 fetching corpus: 3150, signal 167736/215284 (executing program) 2022/10/02 07:34:06 fetching corpus: 3200, signal 168520/216470 (executing program) 2022/10/02 07:34:06 fetching corpus: 3250, signal 169217/217578 (executing program) 2022/10/02 07:34:06 fetching corpus: 3300, signal 169661/218550 (executing program) 2022/10/02 07:34:06 fetching corpus: 3350, signal 170371/219648 (executing program) 2022/10/02 07:34:06 fetching corpus: 3400, signal 171294/220788 (executing program) 2022/10/02 07:34:07 fetching corpus: 3450, signal 172278/221986 (executing program) 2022/10/02 07:34:07 fetching corpus: 3500, signal 174665/223877 (executing program) 2022/10/02 07:34:07 fetching corpus: 3550, signal 175540/224996 (executing program) 2022/10/02 07:34:07 fetching corpus: 3600, signal 176169/226007 (executing program) 2022/10/02 07:34:07 fetching corpus: 3650, signal 177308/227254 (executing program) 2022/10/02 07:34:07 fetching corpus: 3700, signal 177787/228171 (executing program) 2022/10/02 07:34:07 fetching corpus: 3750, signal 178541/229190 (executing program) 2022/10/02 07:34:07 fetching corpus: 3800, signal 178940/230036 (executing program) 2022/10/02 07:34:08 fetching corpus: 3850, signal 179536/230959 (executing program) 2022/10/02 07:34:08 fetching corpus: 3900, signal 180146/231974 (executing program) 2022/10/02 07:34:08 fetching corpus: 3950, signal 180824/233025 (executing program) 2022/10/02 07:34:08 fetching corpus: 4000, signal 181488/234032 (executing program) 2022/10/02 07:34:08 fetching corpus: 4050, signal 182121/234947 (executing program) 2022/10/02 07:34:08 fetching corpus: 4100, signal 182968/235936 (executing program) 2022/10/02 07:34:08 fetching corpus: 4150, signal 183732/236834 (executing program) 2022/10/02 07:34:08 fetching corpus: 4200, signal 184634/237825 (executing program) 2022/10/02 07:34:09 fetching corpus: 4250, signal 185494/238755 (executing program) 2022/10/02 07:34:09 fetching corpus: 4300, signal 186352/239703 (executing program) 2022/10/02 07:34:09 fetching corpus: 4350, signal 187034/240550 (executing program) 2022/10/02 07:34:09 fetching corpus: 4400, signal 188092/241520 (executing program) 2022/10/02 07:34:09 fetching corpus: 4450, signal 188614/242314 (executing program) 2022/10/02 07:34:09 fetching corpus: 4500, signal 189593/243279 (executing program) 2022/10/02 07:34:09 fetching corpus: 4550, signal 190282/244123 (executing program) 2022/10/02 07:34:09 fetching corpus: 4600, signal 190728/244864 (executing program) 2022/10/02 07:34:10 fetching corpus: 4650, signal 191753/245746 (executing program) 2022/10/02 07:34:10 fetching corpus: 4700, signal 192401/246526 (executing program) 2022/10/02 07:34:10 fetching corpus: 4750, signal 192816/247211 (executing program) 2022/10/02 07:34:10 fetching corpus: 4800, signal 193567/247997 (executing program) 2022/10/02 07:34:10 fetching corpus: 4850, signal 194470/248816 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/249500 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/250057 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/250608 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/251202 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/251758 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/252309 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/252860 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/253396 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/253939 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/254540 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/255104 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/255652 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/256211 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/256739 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/257305 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/257888 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/258444 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/259005 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/259546 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/260098 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/260673 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/261219 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/261759 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/262341 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/262906 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/263476 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/264059 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/264635 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/265190 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/265757 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/266344 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/266926 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/267507 (executing program) 2022/10/02 07:34:10 fetching corpus: 4875, signal 194680/268090 (executing program) 2022/10/02 07:34:11 fetching corpus: 4875, signal 194680/268639 (executing program) 2022/10/02 07:34:11 fetching corpus: 4875, signal 194680/269162 (executing program) 2022/10/02 07:34:11 fetching corpus: 4875, signal 194680/269162 (executing program) 2022/10/02 07:34:13 starting 8 fuzzer processes 07:34:13 executing program 0: prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x3) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x3) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x4) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x7) 07:34:13 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x280142, 0xa0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) close_range(r0, r1, 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x0, 0x0, 0x9, 0x2, 0x111, &(0x7f0000000040)="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"}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000480)={0x0, 0x5, 0x3ff}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000540)={&(0x7f00000004c0)=""/84, 0x54, 0x810, 0xff}) write(r0, &(0x7f0000000580)="a9b1d1d4eda8fc46a88d3fba76ab914975362d4d6d4b344665d5420adb36baacf30924803ef5ea1733bc0579628e8d9c386faafce40e74d0228ab9f8422eb533999e39cbcba7d3b3d6adf00190a4d80ead8bfadb3ab7e46e8b32032baab0a17b06734f55792fc66ab7c1a51f9e775789f0c4aa7dd9396911c640d27cd68a3a12d757b6374c1a8b534bedee34311ee98a5b85", 0x92) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000640)={0x2, 0x0, @initdev}, &(0x7f0000000680)=0x10) pwritev(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)="14aea98c3cb7bbfd0e62bcbccdf4a52182342d4c78164c3b0c6b7febac6b68117cc2d753ae160a30da704d9c8b884e6346ac897f7be6b854683f9d55cb3e6cad125023576fffe7925e1da7cdfd9c583405275f3838e96216dac363fd682e1f9dde03d57f358e7ca2d10432c1a46710f4d34f75e17ae3ce8579072b0bdae8be404a50939f1072dade12a67a92322a796fc394436afd13d7ed52a1303317163e7bb76d998ec8aab33ac9fcf3d9aea84e0a5be10e1ed995", 0xb6}], 0x1, 0x32, 0x1e4) write(r0, &(0x7f00000007c0)="0a34d7238678b64835a95acf04eb6e62713fbfac00783384874ba734f46e9cdbb01d0318ce1c9ab253915f9d379b8982cc0b4631227552b0098fdd2a6f98dbba02c9e009", 0x44) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000840)) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000880)={0xfffffff8, 0x5}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000008c0)={{0x62, @broadcast, 0x4e21, 0x3, 'wrr\x00', 0x1c, 0x3ff, 0x45}, {@rand_addr=0x64010100, 0x4e22, 0x3, 0x80000000, 0x6, 0x87}}, 0x44) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) flock(r3, 0xc) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000980)={{0x1, 0x3, 0x27, 0x2, 0x4}, 0x1ff, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0xd9, 0x8001, 0xbb, 0x9}) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000ac0)=0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) fchown(r3, 0xffffffffffffffff, 0xffffffffffffffff) 07:34:13 executing program 2: prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) prctl$PR_GET_SECUREBITS(0x1b) [ 73.085381] audit: type=1400 audit(1664696053.468:6): avc: denied { execmem } for pid=287 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:34:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x44084}, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000001c0)={0x8a, 0x4, 0x2}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x980) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r3, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x24, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x3, 0x100, 0x8, 0x3, 0x7, 0xd19]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf1}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x2e}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x76}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xca}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x85f, 0x80}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x8000) setxattr$incfs_id(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680), &(0x7f00000006c0)={'0000000000000000000000000000000', 0x30}, 0x20, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000081) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x10) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000980)=@add_del={0x2, &(0x7f0000000940)='team_slave_1\x00'}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004094}, 0x40008a0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000ac0)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x24004002) syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) 07:34:13 executing program 5: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000001) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4810}, 0x40) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x90) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8845}, 0x40000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x49805) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x84, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd29}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4040028) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x338}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000c80)='memory.stat\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000d80)={'ip6_vti0\x00', &(0x7f0000000d00)={'ip6tnl0\x00', 0x0, 0x0, 0x3, 0x5, 0x101, 0x21, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7800, 0x4, 0x10001}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002040)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002440)={'ip6tnl0\x00', &(0x7f00000023c0)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x3, 0xffff, 0x6e, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x10, 0x10, 0x3f, 0x1}}) accept4$packet(r3, &(0x7f0000002480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000024c0)=0x14, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x8607456def506b9c, &(0x7f0000002500)={@private, @multicast2, 0x0}, &(0x7f0000002540)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000002780)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002740)={&(0x7f0000002580)={0x1c0, 0x0, 0x200, 0x70bd2c, 0xffffffff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000005}, 0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000002b00)={&(0x7f00000027c0), 0xc, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x84, 0x0, 0x118, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0xc841) 07:34:13 executing program 4: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008014) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-\xf9\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c001}, 0x80) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8001, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x8c, 0x1, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xa3d}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x180, r2, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5f}}}}, [@mon_options, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1b59ac745c4d187dc0c254907e39500d3031b2b677d15bcf"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cc9a4a0c6869174d2b3b76f47f9b56f1d382afecb6f73b39"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "81ce96f4e7cecf9d3d1f2ef23d98ef59d622e39fb56fe939"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cbd51a0ca5ee76e6f3f5aa7bb017a0adb1eaed38d95fe8ee"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xe}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "da9f188c68bdedb5df381c76631a8eb60a764e9b25580f6a"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "70c1061ef53315d836e50298c3838c64108252ece58920f6"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e18de9cf7f65a075b581cbff4130203410e4d01410764183"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x180}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe2(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, 0x0, 0x9, 0xd06, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1600000}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x4000050) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r4, {0x7ff}}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x828200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c000}, 0x24000000) lremovexattr(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)=@known='trusted.syz\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r4) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0xa1a63ae1eab25c4b}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x54, r6, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4c}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3e10}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x163e}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1a}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000404) perf_event_open(&(0x7f0000000ec0)={0x2, 0x80, 0x6, 0x4, 0x6, 0x3, 0x0, 0xfffffffffffffffa, 0x5041, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000e80), 0x4}, 0x404, 0x100, 0x3ff, 0x2, 0x8, 0x101, 0xb1, 0x0, 0x1, 0x0, 0x7fff}, 0x0, 0xe, r5, 0x9) r7 = syz_open_dev$vcsn(&(0x7f0000000f40), 0x1f, 0x400001) bind$netlink(r7, &(0x7f0000000f80)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) 07:34:13 executing program 6: socketpair(0x1d, 0xa, 0x10001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='team_slave_0\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = accept(r2, &(0x7f0000000080)=@caif=@rfm, &(0x7f0000000100)=0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x9}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20080}, 0x4040) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffff001, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}]}, 0x40}, 0x1, 0x0, 0x0, 0xc800}, 0x800) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r3) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002c80)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000002d80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002dc0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000002f80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e00)={0x104, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002fc0), 0x10000, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003040), r0) sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f0000003140)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003100)={&(0x7f0000003080)={0x50, r10, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x32}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x8004) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000003180)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x24, r10, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xa1}, 0x40800) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000003500)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003400)={0x9c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:initctl_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 07:34:13 executing program 7: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x4305}, @val={0x2, 0x0, 0x4, 0x8, 0x0, 0x5}, @llc={@llc={0x0, 0xfe, "b0e0", "65c34130b0ab639f1feaff0a41c298fc3b7f8aafbfb7ce7410e8339b53baf3787b581439dd57f0f8638dcb8803bdc3a0ff60f954262e711401a11e510fe397e9a41f4b05a5530358108a887a246fb36fc32617cf5183b4a4ba798f48cb87a531f826ad1377d0e57f3d983dfad60cd6351b458e"}}}, 0x85) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/backlight', 0x181401, 0x31) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x8, 0x78, 0x7fffffff, 0xff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x0) r2 = fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000200)=0x4843) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000240)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "a242e7c4c0b09a"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001240)={r3}) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f0000002240)={0x1, 0xf8, 0xb2, 0x5}) ioctl$DVD_READ_STRUCT(r0, 0x5390, &(0x7f0000002280)=@disckey={0x2, 0x0, "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"}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000002ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) rename(&(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40)='./file0\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002e00)={'syztnl2\x00', &(0x7f0000002d80)={'gretap0\x00', 0x0, 0x20, 0x10, 0x8, 0x80000001, {{0x11, 0x4, 0x1, 0x23, 0x44, 0x68, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0x13, 0x41, [@private=0xa010100, @rand_addr=0x64010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1b, 0x2b, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010100, @multicast2, @remote]}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000002e40)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x30, r5}) dup(r2) [ 74.386610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.388441] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.389921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.393048] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.395176] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.396860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.401846] Bluetooth: hci0: HCI_REQ-0x0c1a [ 74.465321] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.467260] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.469983] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.472042] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.474554] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.475826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.475925] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.479011] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.480482] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.482507] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.484133] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.501032] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.507699] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.509266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.510576] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.512781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.514171] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.515597] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.516959] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.518031] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.519589] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.521227] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.522427] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.535246] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.535459] Bluetooth: hci3: HCI_REQ-0x0c1a [ 74.538462] Bluetooth: hci4: HCI_REQ-0x0c1a [ 74.540536] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.542588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.542665] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.544954] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.550966] Bluetooth: hci2: HCI_REQ-0x0c1a [ 74.551996] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.557466] Bluetooth: hci1: HCI_REQ-0x0c1a [ 74.566601] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.568022] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.601097] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 74.619727] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.621051] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.626106] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 74.631082] Bluetooth: hci7: HCI_REQ-0x0c1a [ 74.634730] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 74.639944] Bluetooth: hci6: HCI_REQ-0x0c1a [ 76.469769] Bluetooth: hci0: command 0x0409 tx timeout [ 76.532419] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 76.596793] Bluetooth: hci4: command 0x0409 tx timeout [ 76.597505] Bluetooth: hci1: command 0x0409 tx timeout [ 76.598090] Bluetooth: hci3: command 0x0409 tx timeout [ 76.598740] Bluetooth: hci2: command 0x0409 tx timeout [ 76.660454] Bluetooth: hci6: command 0x0409 tx timeout [ 76.661228] Bluetooth: hci7: command 0x0409 tx timeout [ 78.516394] Bluetooth: hci0: command 0x041b tx timeout [ 78.644427] Bluetooth: hci2: command 0x041b tx timeout [ 78.644897] Bluetooth: hci3: command 0x041b tx timeout [ 78.645304] Bluetooth: hci1: command 0x041b tx timeout [ 78.645743] Bluetooth: hci4: command 0x041b tx timeout [ 78.708420] Bluetooth: hci7: command 0x041b tx timeout [ 78.708880] Bluetooth: hci6: command 0x041b tx timeout [ 80.564420] Bluetooth: hci0: command 0x040f tx timeout [ 80.692425] Bluetooth: hci4: command 0x040f tx timeout [ 80.692449] Bluetooth: hci1: command 0x040f tx timeout [ 80.692899] Bluetooth: hci3: command 0x040f tx timeout [ 80.693331] Bluetooth: hci2: command 0x040f tx timeout [ 80.756433] Bluetooth: hci6: command 0x040f tx timeout [ 80.756872] Bluetooth: hci7: command 0x040f tx timeout [ 81.460463] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 82.612428] Bluetooth: hci0: command 0x0419 tx timeout [ 82.740425] Bluetooth: hci3: command 0x0419 tx timeout [ 82.740449] Bluetooth: hci2: command 0x0419 tx timeout [ 82.740918] Bluetooth: hci1: command 0x0419 tx timeout [ 82.741399] Bluetooth: hci4: command 0x0419 tx timeout [ 82.805451] Bluetooth: hci7: command 0x0419 tx timeout [ 82.805477] Bluetooth: hci6: command 0x0419 tx timeout [ 84.024838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.025804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.027649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.029600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.032026] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.033006] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.036495] Bluetooth: hci5: HCI_REQ-0x0c1a [ 86.069419] Bluetooth: hci5: command 0x0409 tx timeout [ 88.117436] Bluetooth: hci5: command 0x041b tx timeout [ 90.164450] Bluetooth: hci5: command 0x040f tx timeout [ 92.213408] Bluetooth: hci5: command 0x0419 tx timeout [ 129.280675] audit: type=1400 audit(1664696109.663:7): avc: denied { open } for pid=3911 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 07:35:24 executing program 6: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001c0069ff000000000000000007"], 0x1c}], 0x1}, 0x0) io_uring_setup(0x3790, &(0x7f00000001c0)={0x0, 0x12fc, 0x0, 0x3, 0x4}) 07:35:24 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6d706f6c3d62696e643d7374079761617469633a39312c00"]) execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=[&(0x7f00000000c0)='mpol', &(0x7f0000000100)='bind', &(0x7f0000000140)='=static', &(0x7f0000000180)='\x00'], &(0x7f0000000240), 0x1000) 07:35:24 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35393638303238373300"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000003bf48e55190e4cca80d5ddff88e7b6a1010000000c00000000000000d7f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d7f4655fd7f4655fd7f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f00000000000004000200000000000000050000001500"/64, 0x40, 0x1600}, {&(0x7f0000010f00)="20000000d0fadacdd0fadacd00000000d7f4655f00"/32, 0x20, 0x1680}, {&(0x7f0000011000)="c0410000002c0000d7f4655fd7f4655fd7f4655f0000000000000200160000000000000000000000160000001700000018000000190000001a0000001b0000001c0000001d0000001e0000001f00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d7f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x2800}, {&(0x7f0000011100)="ed4100003c000000d7f4655fd7f4655fd7f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000b7a4e9e000000000000000000000000000000000000000000000000020000000d0fadacdd0fadacdd0fadacdd7f4655fd0fadacd0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2a00}, {&(0x7f0000011200)="ed8100001a040000d7f4655fd7f4655fd7f4655f00000000000001000400000000000000010000002100000022000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009f52167000000000000000000000000000000000000000000000000020000000d0fadacdd0fadacdd0fadacdd7f4655fd0fadacd0000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011300)="ffa1000026000000d7f4655fd7f4655fd7f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3539363830323837332f66696c65302f66696c6530000000000000000000000000000000000000000000008d6390c800000000000000000000000000000000000000000000000020000000d0fadacdd0fadacdd0fadacdd7f4655fd0fadacd0000000000000000", 0xa0, 0x2e00}, {&(0x7f0000011400)="ed8100000a000000d7f4655fd7f4655fd7f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d37571e00000000000000000000000000000000000000000000000020000000d0fadacdd0fadacdd0fadacdd7f4655fd0fadacd0000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3000}, {&(0x7f0000011500)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d7f4655fd7f4655fd7f4655f0000000000000200120000000000000001000000230000002400000025000000260000002700000028000000290000002a0000002b000000000000000000000000000000000000000000000000000000b964ab4600000000000000000000000000000000000000000000000020000000d0fadacdd0fadacdd0fadacdd7f4655fd0fadacd0000000000000000", 0xc0, 0x31e0}, {&(0x7f0000011600)="ed81000064000000d7f4655fd7f4655fd7f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616cc2ee83da00000000000000000000000000000000000000000000000020000000d0fadacdd0fadacdd0fadacdd7f4655fd0fadacd0000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x3400}, {&(0x7f0000011700)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x35c0}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x5400}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x5800}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x5c00}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x6000}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x6400}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x6800}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x6c00}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x7000}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x7400}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x7800}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x7c00}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0x8000}, {&(0x7f0000012400)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8400}], 0x0, &(0x7f0000012900)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000000)={0x0, 0x0, 0xc, 0x2, @lba}) write(r1, &(0x7f0000000140)="285bb2198222e234b2992cfe3aca33b5ae721ef675c6b87ce0a375a49bfd47636a93606e90b3f23943d6f572060f6ba1fda7f9fad1f3b928597bc200ff83025326f6e19fcf03c4c5d4e52a08d43a326b6d4ec0b806e3874cea63eb1b05c8ebe1da47c4cd74e7093e1effc0b7e4b09c284ee74725a2f777", 0x77) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x1}, [{0x2, 0x3}, {0x2, 0x0, r2}, {0x2, 0x3, r3}, {0x2, 0x6, r4}], {0x4, 0x5}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x6}, {0x8, 0x0, 0xee00}], {0x10, 0x3}, {0x20, 0x1}}, 0x64, 0x5) 07:35:24 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x344000, 0x0) r1 = syz_io_uring_setup(0xeaf, &(0x7f0000000200)={0x0, 0x20, 0x0, 0x0, 0x7a, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x801, 0x80000, 0x0}, 0x0) io_uring_enter(r1, 0x59e3, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_aout(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x164) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) ioctl$CDROMREADTOCENTRY(r5, 0x5306, &(0x7f0000000000)={0x5, 0x0, 0xc, 0x0, @msf={0x2, 0x3f, 0x6a}}) close_range(r5, r4, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) 07:35:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='abort,min_batch_time=0x0000000000000000,nobh,nouser_xattr,data0ordered,discard,obj_user=@^%f/&{{$%x,seclabel,\x00']) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) ioctl$CDROMREADTOCENTRY(r0, 0x5306, &(0x7f0000000000)={0x0, 0x0, 0xc, 0x2, @lba}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x10002, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002bbd7000fcdbdf25050000000c0004000600000000000000080001000000000008000100000000000c0003000100010000000a000c00080006000000000000000c00050002000000000000000c0005002801000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x184020, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'min_batch_time'}}, {@uname={'uname', 0x3d, 'nobh'}}], [{@uid_lt={'uid<', 0xee01}}, {@uid_gt={'uid>', r3}}]}}) 07:35:24 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e34343631303034383400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000dff4ef821ec34de5a68f275e28ea4831010040000c00000000000000d7f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000003100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="03000000040000000500000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d7f4655fd7f4655fd7f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010e00)="20000000901431899014318900000000d7f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000010f00)="8081000000300404d7f4655fd7f4655fd7f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d7f4655f00"/160, 0xa0, 0x1a00}, {&(0x7f0000011000)="c0410000002c0000d7f4655fd7f4655fd7f4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000020000000", 0x40, 0x1e00}, {&(0x7f0000011100)="20000000000000000000000000000000d7f4655f000000000000000000000000000002ea00"/64, 0x40, 0x1e80}, {&(0x7f0000011200)="ed4100003c000000d8f4655fd8f4655fd8f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000014a8ae8200000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011300)="ed8100001a040000d8f4655fd8f4655fd8f4655f00000000000001002000000000000800010000000af3010004000000000000000000000002000000500000000000000000000000000000000000000000000000000000000000000000000000000000001c98117600000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000", 0xa0, 0x2000}, {&(0x7f0000011400)="ffa1000026000000d8f4655fd8f4655fd8f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3434363130303438342f66696c65302f66696c653000000000000000000000000000000000000000000000125dc13800000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000", 0xa0, 0x2100}, {&(0x7f0000011500)="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", 0x1a0, 0x2200}, {&(0x7f0000011700)="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", 0x100, 0x2400}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x8000}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012400)="504d4d00504d4dffd8f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012a00)) umount2(&(0x7f0000000040)='./file0\x00', 0x4) openat(r0, &(0x7f0000000080)='./file0\x00', 0x40a003, 0x20) 07:35:24 executing program 3: setuid(0xee00) prctl$PR_SET_SECUREBITS(0x1c, 0x0) r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = geteuid() fchown(r0, r1, 0xee01) r2 = geteuid() fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) clone3(&(0x7f0000000440)={0x80000800, &(0x7f0000000000)=0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0, {0x37}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000380)=[r4, 0x0, r4], 0x3}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000049c0)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/208, 0xd0}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000004c0)=""/82, 0x52}, {&(0x7f00000007c0)=""/148, 0x94}, {&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000940)=""/152, 0x98}, {&(0x7f0000000a00)=""/158, 0x9e}, {&(0x7f0000000ac0)=""/88, 0x58}, {&(0x7f0000000340)=""/8, 0x8}], 0x8}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000c40)=""/194, 0xc2}, {&(0x7f0000000d40)=""/216, 0xd8}, {&(0x7f0000000e40)=""/210, 0xd2}], 0x3, &(0x7f0000000f40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000001000)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001080)=""/220, 0xdc}, {&(0x7f0000001180)=""/192, 0xc0}, {&(0x7f0000001240)=""/56, 0x38}, {&(0x7f0000001280)=""/15, 0xf}, {&(0x7f00000012c0)=""/138, 0x8a}, {&(0x7f0000001380)=""/45, 0x2d}, {&(0x7f00000013c0)=""/122, 0x7a}, {&(0x7f0000001440)=""/198, 0xc6}], 0x8, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001600)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/218, 0xda}, {&(0x7f0000001800)=""/210, 0xd2}, {&(0x7f0000001900)=""/192, 0xc0}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/27, 0x1b}], 0x6, &(0x7f0000002a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000002bc0), 0x6e, &(0x7f0000004100)=[{&(0x7f0000002c40)=""/140, 0x8c}, {&(0x7f0000002d00)=""/10, 0xa}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/192, 0xc0}, {&(0x7f0000003e00)=""/147, 0x93}, {&(0x7f000001dc80)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/222, 0xde}, {&(0x7f0000003fc0)=""/23, 0x17}, {&(0x7f0000004000)=""/202, 0xca}, {&(0x7f000001ec80)=""/4096, 0x1000}], 0xa, &(0x7f00000041c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000004280)=@abs, 0x6e, &(0x7f00000048c0)=[{&(0x7f0000004300)=""/120, 0x78}, {&(0x7f0000004380)=""/127, 0x7f}, {&(0x7f0000004400)=""/192, 0xc0}, {&(0x7f00000044c0)=""/225, 0xe1}, {&(0x7f00000045c0)=""/162, 0xa2}, {&(0x7f0000004680)=""/103, 0x67}, {&(0x7f0000004700)=""/246, 0xf6}, {&(0x7f0000004800)=""/147, 0x93}], 0x8, &(0x7f0000004940)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x7, 0x100, &(0x7f0000004b80)={0x77359400}) r8 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r12, @ANYRES32=r8, @ANYRES32=r11, @ANYRESHEX=r10, @ANYRES64, @ANYRESOCT, @ANYRES64=r9, @ANYRES32, @ANYRESOCT]) fchown(r5, r7, r12) [ 143.869159] tmpfs: Bad value for 'mpol' kcmp$KCMP_EPOLL_TFD(0x0, r6, 0x7, 0xffffffffffffffff, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x1}) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x2, r1, 0xee00, r2, r3, 0x40, 0xff}, 0x3e1, 0x0, 0x1000, 0x100000000, 0xffffffffffffffff, r6, 0x20}) 07:35:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x14, 0x5, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x40000) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x400000, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)=ANY=[@ANYBLOB="0100040000000000000022321075c06f", @ANYRES32=r0, @ANYBLOB="29000000000000002e2f66696c653000c34621b99d057252f6cdd8aa11c42c441eeb97b10d0983e0befdf0d497abda6d4f11e645b2a2c986e907899802559048ded0a068bfa499f2107d91bad41544c6dc74c69435dc9d1a15e0b1f39078fdec526b85cdf1ea83fc33361b0d74cc12d4017546a79915ecdd5584a5ed896ae55981"]) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000000)={0x0, 0x0, 0xc, 0x2, @lba}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r3, @ANYRES32=r6, @ANYRESHEX=r5, @ANYRES32=r1, @ANYRESOCT, @ANYRES64=r4, @ANYRES32, @ANYRESOCT]) r9 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r9, 0x0) close(r9) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4801) [ 143.869927] loop7: detected capacity change from 0 to 1024 [ 143.880422] audit: type=1400 audit(1664696124.263:8): avc: denied { kernel } for pid=3987 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 143.894414] ------------[ cut here ]------------ [ 143.894448] [ 143.894454] ====================================================== [ 143.894461] WARNING: possible circular locking dependency detected [ 143.894468] 6.0.0-rc7-next-20220930 #1 Not tainted [ 143.894481] ------------------------------------------------------ [ 143.894487] syz-executor.3/3994 is trying to acquire lock: [ 143.894499] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 143.894569] [ 143.894569] but task is already holding lock: [ 143.894575] ffff88800f126020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 143.894625] [ 143.894625] which lock already depends on the new lock. [ 143.894625] [ 143.894630] [ 143.894630] the existing dependency chain (in reverse order) is: [ 143.894637] [ 143.894637] -> #3 (&ctx->lock){....}-{2:2}: [ 143.894663] _raw_spin_lock+0x2a/0x40 [ 143.894685] __perf_event_task_sched_out+0x53b/0x18d0 [ 143.894707] __schedule+0xedd/0x2470 [ 143.894734] preempt_schedule_common+0x45/0xc0 [ 143.894764] __cond_resched+0x17/0x30 [ 143.894792] __mutex_lock+0xa3/0x14d0 [ 143.894821] __do_sys_perf_event_open+0x1eec/0x32c0 [ 143.894844] do_syscall_64+0x3b/0x90 [ 143.894877] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 143.894902] [ 143.894902] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 143.894929] _raw_spin_lock_nested+0x30/0x40 [ 143.894950] raw_spin_rq_lock_nested+0x1e/0x30 [ 143.894975] task_fork_fair+0x63/0x4d0 [ 143.895007] sched_cgroup_fork+0x3d0/0x540 [ 143.895035] copy_process+0x4183/0x6e20 [ 143.895055] kernel_clone+0xe7/0x890 [ 143.895074] user_mode_thread+0xad/0xf0 [ 143.895094] rest_init+0x24/0x250 [ 143.895117] arch_call_rest_init+0xf/0x14 [ 143.895149] start_kernel+0x4c6/0x4eb [ 143.895180] secondary_startup_64_no_verify+0xe0/0xeb [ 143.895206] [ 143.895206] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 143.895232] _raw_spin_lock_irqsave+0x39/0x60 [ 143.895254] try_to_wake_up+0xab/0x1930 [ 143.895280] up+0x75/0xb0 [ 143.895308] __up_console_sem+0x6e/0x80 [ 143.895339] console_unlock+0x46a/0x590 [ 143.895370] do_con_write+0xc05/0x1d50 [ 143.895389] con_write+0x21/0x40 [ 143.895407] n_tty_write+0x4d4/0xfe0 [ 143.895429] file_tty_write.constprop.0+0x455/0x8a0 [ 143.895452] vfs_write+0x9c3/0xd90 [ 143.895484] ksys_write+0x127/0x250 [ 143.895516] do_syscall_64+0x3b/0x90 [ 143.895549] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 143.895574] [ 143.895574] -> #0 ((console_sem).lock){....}-{2:2}: [ 143.895604] tmpfs: Bad value for 'mpol' [ 143.895601] __lock_acquire+0x2a02/0x5e70 [ 143.895635] lock_acquire+0x1a2/0x530 [ 143.895666] _raw_spin_lock_irqsave+0x39/0x60 [ 143.895687] down_trylock+0xe/0x70 [ 143.895717] __down_trylock_console_sem+0x3b/0xd0 [ 143.895749] vprintk_emit+0x16b/0x560 [ 143.895781] vprintk+0x84/0xa0 [ 143.895812] _printk+0xba/0xf1 [ 143.895833] report_bug.cold+0x72/0xab [ 143.895865] handle_bug+0x3c/0x70 [ 143.895898] exc_invalid_op+0x14/0x50 [ 143.895931] asm_exc_invalid_op+0x16/0x20 [ 143.895955] group_sched_out.part.0+0x2c7/0x460 [ 143.895989] ctx_sched_out+0x8f1/0xc10 [ 143.896022] __perf_event_task_sched_out+0x6d0/0x18d0 [ 143.896044] __schedule+0xedd/0x2470 [ 143.896071] preempt_schedule_common+0x45/0xc0 [ 143.896100] __cond_resched+0x17/0x30 [ 143.896128] __mutex_lock+0xa3/0x14d0 [ 143.896157] __do_sys_perf_event_open+0x1eec/0x32c0 [ 143.896179] do_syscall_64+0x3b/0x90 [ 143.896213] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 143.896238] [ 143.896238] other info that might help us debug this: [ 143.896238] [ 143.896243] Chain exists of: [ 143.896243] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 143.896243] [ 143.896272] Possible unsafe locking scenario: [ 143.896272] [ 143.896276] CPU0 CPU1 [ 143.896280] ---- ---- [ 143.896285] lock(&ctx->lock); [ 143.896296] lock(&rq->__lock); [ 143.896308] lock(&ctx->lock); [ 143.896321] lock((console_sem).lock); [ 143.896333] [ 143.896333] *** DEADLOCK *** [ 143.896333] [ 143.896337] 2 locks held by syz-executor.3/3994: [ 143.896350] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 143.896408] #1: ffff88800f126020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 143.896460] [ 143.896460] stack backtrace: [ 143.896465] CPU: 1 PID: 3994 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 143.896492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 143.896508] Call Trace: [ 143.896513] [ 143.896521] dump_stack_lvl+0x8b/0xb3 [ 143.896557] check_noncircular+0x263/0x2e0 [ 143.896590] ? format_decode+0x26c/0xb50 [ 143.896621] ? print_circular_bug+0x450/0x450 [ 143.896655] ? simple_strtoul+0x30/0x30 [ 143.896684] ? __lockdep_reset_lock+0x180/0x180 [ 143.896718] ? format_decode+0x26c/0xb50 [ 143.896752] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 143.896787] __lock_acquire+0x2a02/0x5e70 [ 143.896830] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 143.896875] lock_acquire+0x1a2/0x530 [ 143.896908] ? down_trylock+0xe/0x70 [ 143.896942] ? lock_release+0x750/0x750 [ 143.896979] ? find_held_lock+0x2c/0x110 [ 143.897012] ? vprintk+0x84/0xa0 [ 143.897048] _raw_spin_lock_irqsave+0x39/0x60 [ 143.897070] ? down_trylock+0xe/0x70 [ 143.897102] down_trylock+0xe/0x70 [ 143.897134] ? vprintk+0x84/0xa0 [ 143.897167] __down_trylock_console_sem+0x3b/0xd0 [ 143.897201] vprintk_emit+0x16b/0x560 [ 143.897239] vprintk+0x84/0xa0 [ 143.897273] _printk+0xba/0xf1 [ 143.897296] ? record_print_text.cold+0x16/0x16 [ 143.897324] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 143.897378] ? lock_downgrade+0x6d0/0x6d0 [ 143.897414] ? report_bug.cold+0x66/0xab [ 143.897449] ? group_sched_out.part.0+0x2c7/0x460 [ 143.897486] report_bug.cold+0x72/0xab [ 143.897524] handle_bug+0x3c/0x70 [ 143.897558] exc_invalid_op+0x14/0x50 [ 143.897594] asm_exc_invalid_op+0x16/0x20 [ 143.897620] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 143.897660] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 143.897682] RSP: 0018:ffff8880409ef978 EFLAGS: 00010006 [ 143.897700] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 143.897714] RDX: ffff88801ddc9ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 143.897730] RBP: ffff88803fea8000 R08: 0000000000000005 R09: 0000000000000001 [ 143.897744] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f126000 [ 143.897758] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 143.897780] ? group_sched_out.part.0+0x2c7/0x460 [ 143.897820] ? group_sched_out.part.0+0x2c7/0x460 [ 143.897859] ctx_sched_out+0x8f1/0xc10 [ 143.897898] __perf_event_task_sched_out+0x6d0/0x18d0 [ 143.897926] ? lock_is_held_type+0xd7/0x130 [ 143.897954] ? __perf_cgroup_move+0x160/0x160 [ 143.897975] ? set_next_entity+0x304/0x550 [ 143.898010] ? update_curr+0x267/0x740 [ 143.898046] ? lock_is_held_type+0xd7/0x130 [ 143.898074] __schedule+0xedd/0x2470 [ 143.898108] ? io_schedule_timeout+0x150/0x150 [ 143.898138] ? find_held_lock+0x2c/0x110 [ 143.898171] ? lock_is_held_type+0xd7/0x130 [ 143.898197] ? __cond_resched+0x17/0x30 [ 143.898227] preempt_schedule_common+0x45/0xc0 [ 143.898260] __cond_resched+0x17/0x30 [ 143.898289] __mutex_lock+0xa3/0x14d0 [ 143.898322] ? lock_is_held_type+0xd7/0x130 [ 143.898348] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 143.898374] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 143.898404] ? mutex_lock_io_nested+0x1310/0x1310 [ 143.898439] ? lockdep_hardirqs_on+0x79/0x100 [ 143.898464] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 143.898498] ? __do_sys_perf_event_open+0x1e7b/0x32c0 [ 143.898526] __do_sys_perf_event_open+0x1eec/0x32c0 [ 143.898557] ? perf_compat_ioctl+0x130/0x130 [ 143.898580] ? xfd_validate_state+0x59/0x180 [ 143.898623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 143.898651] ? syscall_enter_from_user_mode+0x1d/0x50 [ 143.898682] do_syscall_64+0x3b/0x90 [ 143.898718] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 143.898744] RIP: 0033:0x7ff9b5a21b19 [ 143.898760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 143.898782] RSP: 002b:00007ff9b2f76188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 143.898803] RAX: ffffffffffffffda RBX: 00007ff9b5b35020 RCX: 00007ff9b5a21b19 [ 143.898819] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 143.898833] RBP: 00007ff9b5a7bf6d R08: 0000000000000000 R09: 0000000000000000 [ 143.898847] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 143.898862] R13: 00007fff0de6eedf R14: 00007ff9b2f76300 R15: 0000000000022000 [ 143.898887] [ 143.901759] EXT4-fs: Ignoring removed nobh option [ 143.902866] WARNING: CPU: 1 PID: 3994 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 143.903752] ext3: Unknown parameter 'nouser_xattr' [ 143.904982] Modules linked in: [ 143.904993] CPU: 1 PID: 3994 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 143.910850] loop4: detected capacity change from 0 to 512 [ 143.911221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 144.027432] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 144.028304] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 144.031130] RSP: 0018:ffff8880409ef978 EFLAGS: 00010006 [ 144.031952] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 144.032965] RDX: ffff88801ddc9ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 144.034066] RBP: ffff88803fea8000 R08: 0000000000000005 R09: 0000000000000001 [ 144.035164] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f126000 [ 144.036246] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 144.037328] FS: 00007ff9b2f76700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 144.038579] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.039479] CR2: 00007ff9b2f76718 CR3: 000000003e6b4000 CR4: 0000000000350ee0 [ 144.040570] Call Trace: [ 144.040957] [ 144.041275] ctx_sched_out+0x8f1/0xc10 [ 144.041858] __perf_event_task_sched_out+0x6d0/0x18d0 [ 144.042567] ? lock_is_held_type+0xd7/0x130 [ 144.043162] ? __perf_cgroup_move+0x160/0x160 [ 144.043795] ? set_next_entity+0x304/0x550 [ 144.044391] ? update_curr+0x267/0x740 [ 144.044950] ? lock_is_held_type+0xd7/0x130 [ 144.045574] __schedule+0xedd/0x2470 [ 144.046099] ? io_schedule_timeout+0x150/0x150 [ 144.046738] ? find_held_lock+0x2c/0x110 [ 144.047312] ? lock_is_held_type+0xd7/0x130 [ 144.047916] ? __cond_resched+0x17/0x30 [ 144.048479] preempt_schedule_common+0x45/0xc0 [ 144.049123] __cond_resched+0x17/0x30 [ 144.049670] __mutex_lock+0xa3/0x14d0 [ 144.050209] ? lock_is_held_type+0xd7/0x130 [ 144.050813] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 144.051537] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 144.052298] ? mutex_lock_io_nested+0x1310/0x1310 [ 144.052984] ? lockdep_hardirqs_on+0x79/0x100 [ 144.053625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 144.054382] ? __do_sys_perf_event_open+0x1e7b/0x32c0 [ 144.055106] __do_sys_perf_event_open+0x1eec/0x32c0 [ 144.055818] ? perf_compat_ioctl+0x130/0x130 [ 144.056449] ? xfd_validate_state+0x59/0x180 [ 144.057094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 144.057841] ? syscall_enter_from_user_mode+0x1d/0x50 [ 144.058562] do_syscall_64+0x3b/0x90 [ 144.059104] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 144.059825] RIP: 0033:0x7ff9b5a21b19 [ 144.060349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 144.062842] RSP: 002b:00007ff9b2f76188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 144.063879] RAX: ffffffffffffffda RBX: 00007ff9b5b35020 RCX: 00007ff9b5a21b19 [ 144.064854] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 144.065847] RBP: 00007ff9b5a7bf6d R08: 0000000000000000 R09: 0000000000000000 [ 144.066836] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 144.067826] R13: 00007fff0de6eedf R14: 00007ff9b2f76300 R15: 0000000000022000 [ 144.068804] [ 144.069142] irq event stamp: 380 [ 144.069631] hardirqs last enabled at (379): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 144.070972] hardirqs last disabled at (380): [] __schedule+0x1225/0x2470 [ 144.072126] softirqs last enabled at (360): [] __irq_exit_rcu+0x11b/0x180 [ 144.073302] softirqs last disabled at (349): [] __irq_exit_rcu+0x11b/0x180 [ 144.074477] ---[ end trace 0000000000000000 ]--- [ 144.076357] hrtimer: interrupt took 19266 ns [ 144.091292] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. 07:35:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002400000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e2ffffff9"], 0x28}}, 0x0) [ 144.111163] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. 07:35:24 executing program 0: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000480)={0x9de0, 0x1000, 0x5, 0xc52b, 0x3, [{0x80000001, 0x5, 0x4, '\x00', 0x2}, {0x6, 0x400, 0x5, '\x00', 0x802}, {0xfff, 0x7, 0x1, '\x00', 0x2903}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32323330373039383000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040000c00000000000000daf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000004300000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000daf4655fdaf4655fdaf4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000daf4655fdbf4655fdbf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011600)="20000000641e8ebf641e8ebf00000000daf4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011700)="8081000000601020daf4655fdaf4655fdaf4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000daf4655f00"/160, 0xa0, 0x2600}, {&(0x7f0000011800)="c041000000380000daf4655fdaf4655fdaf4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000020000000", 0x40, 0x2a00}, {&(0x7f0000011900)="20000000000000000000000000000000daf4655f000000000000000000000000000002ea00"/64, 0x40, 0x2a80}, {&(0x7f0000011a00)="ed4100003c000000dbf4655fdbf4655fdbf4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000904a5ec200000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000011b00)="ed8100001a040000dbf4655fdbf4655fdbf4655f00000000000001004000000000000800010000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000046b58a6000000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011c00)="ffa1000026000000dbf4655fdbf4655fdbf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3232333037303938302f66696c65302f66696c65300000000000000000000000000000000000000000000029d1c2e100000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011d00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011f00)="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", 0x100, 0x3000}, {&(0x7f0000012000)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012100)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x10000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012800)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033320075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x28000}], 0x0, &(0x7f0000012e00)) 07:35:24 executing program 6: set_mempolicy(0x5, &(0x7f0000000000)=0x3, 0x3ff) set_mempolicy(0x4000, &(0x7f0000000040)=0xec05, 0x7fff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4d031, 0xffffffffffffffff, 0x0) 07:35:24 executing program 3: clone3(&(0x7f0000004c00)={0xc0003900, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 144.152781] loop0: detected capacity change from 0 to 2048 [ 144.197799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 144.208696] EXT4-fs (loop7): unmounting filesystem. [ 144.282388] EXT4-fs: Ignoring removed nobh option [ 144.283130] ext3: Unknown parameter 'nouser_xattr' [ 144.299671] EXT4-fs (loop0): unmounting filesystem. [ 144.351796] EXT4-fs (loop4): unmounting filesystem. VM DIAGNOSIS: 07:35:24 Registers: info registers vcpu 0 RAX=ffff88806c300000 RBX=00000000fd94d393 RCX=0000000000000011 RDX=000000000004d393 RSI=ffff8880408cf454 RDI=0000000000000001 RBP=0000000000000000 RSP=ffff8880408cf370 R8 =0000000000000011 R9 =ffff888008c09510 R10=ffff88806c569c98 R11=0000000000000001 R12=0000000000000000 R13=0000000000000001 R14=0000000000000d40 R15=ffff8880408cf3d0 RIP=ffffffff8217ab35 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe43556e700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe43556dfe8 CR3=0000000040806000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ff00000000ff0000 00000000000000ff YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM02=0000000000000000 0000000000000000 00007fe4380df7e0 00007fe4380df7c0 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 262f66255e403d72 6573755f6a626f2c YMM06=0000000000000000 0000000000000000 647261637369642c 6465726564726f30 YMM07=0000000000000000 0000000000000000 617461642c727474 61785f726573756f YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff8880409ef3c0 R8 =0000000000000001 R9 =000000000000000a R10=000000000000006c R11=0000000000000001 R12=000000000000006c R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff9b2f76700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff9b2f76718 CR3=000000003e6b4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000